CVE-2020-22839

2021-02-0920:15:12

Google

osv.dev

6 Medium

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

79.8%

JSON

Reflected cross-site scripting vulnerability (XSS) in the evoadm.php file in b2evolution cms version 6.11.6-stable allows remote attackers to inject arbitrary webscript or HTML code via the tab3 parameter.

CPENameOperatorVersion
b2evolutioneq6.10.4
b2evolutioneq6.6.2
b2evolutioneq6.0.0-alpha.1
b2evolutioneq6.10.3
b2evolutioneq6-9-5
b2evolutioneq6.11.6
b2evolutioneq6.7.0-alpha
b2evolutioneq6.7.1-beta
b2evolutioneq6.7.4
b2evolutioneq6.8.7

Name	Operator	Version
b2evolution	eq	6.10.4
b2evolution	eq	6.6.2
b2evolution	eq	6.0.0-alpha.1
b2evolution	eq	6.10.3
b2evolution	eq	6-9-5
b2evolution	eq	6.11.6
b2evolution	eq	6.7.0-alpha
b2evolution	eq	6.7.1-beta
b2evolution	eq	6.7.4
b2evolution	eq	6.8.7